This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
File:                     6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json)
Hash identifier:          1xoDdkjWzUHNZjhS8kYcvK4uc1g2A5ktDEuLFMO86H0=
Subject key identifier:   1E:70:2E:13:96:CB:FD:48:75:46:65:D7:BF:F3:9B:9A:E1:00:B1:58
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Certificate issuer:       /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial:       019C4434B4592C61659FA4C9F51FDFBCAFB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
Manifest number:          0CC9
Signing time:             Mon 09 Feb 2026 21:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:30 +0000
Files and hashes:         1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: WWW087fmqtX7R9WfPZXsVU0Rp34eC+ta48DBIUzr+LU=)
                          2: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (hash: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:b4:59:2c:61:65:9f:a4:c9:f5:1f:df:bc:af:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
        Validity
            Not Before: Feb  9 21:00:30 2026 GMT
            Not After : Feb 10 21:00:30 2026 GMT
        Subject: CN=1e702e1396cbfd48754665d7bff39b9ae100b158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:db:30:c1:96:f6:28:ef:5d:08:a9:d7:fc:
                    46:4a:10:3f:23:a0:45:2c:de:06:a8:25:9f:69:46:
                    78:68:e1:71:f3:0e:17:55:82:74:dc:53:a9:51:55:
                    ff:7c:bf:5a:77:59:fa:7b:13:9d:79:d7:15:9b:62:
                    1f:db:f4:a3:a2:6f:43:8d:bf:bb:60:df:d6:fa:52:
                    ce:38:ff:06:ea:cc:b8:c0:63:03:ed:af:fe:ae:c1:
                    17:80:f1:a2:9b:84:f8:d9:2b:21:96:03:37:d9:45:
                    13:13:73:d6:63:90:92:99:a0:52:27:1d:60:e0:e0:
                    55:cd:fd:d9:f1:40:cf:31:64:ae:5f:49:b1:4f:cd:
                    a1:9a:57:b5:22:ac:b8:50:b1:9b:5d:2c:53:a0:31:
                    16:cc:72:03:aa:4a:4b:de:f0:63:09:24:b6:59:31:
                    73:3e:9d:61:58:9b:e7:33:ed:f6:49:89:9a:e8:c6:
                    cf:a7:8e:8d:44:2c:44:8e:d1:24:b2:95:6e:af:8b:
                    5d:8d:39:3e:88:18:e9:3c:30:96:19:69:4e:cb:6a:
                    58:99:8f:b3:64:a7:fb:8a:79:ef:f3:e0:84:91:85:
                    0f:ff:5b:79:52:ac:b0:e7:ed:76:e9:e0:a6:2c:a9:
                    95:b7:ba:44:ff:97:c3:a0:82:2c:09:c6:13:bd:71:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:2E:13:96:CB:FD:48:75:46:65:D7:BF:F3:9B:9A:E1:00:B1:58
            X509v3 Authority Key Identifier:
                keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:91:07:4c:de:43:02:58:43:8c:ba:1e:a1:84:87:1e:b4:de:
         67:e0:d5:b6:cb:8d:ea:a3:22:2b:a9:6e:8a:76:cd:af:f5:26:
         f9:70:24:25:8d:03:4f:a4:ca:ff:2e:8b:a9:86:f7:df:34:e6:
         f7:4a:38:ce:b0:8f:12:a9:5d:48:99:26:84:5d:19:5c:46:59:
         63:9d:c0:3a:f3:78:08:43:51:bd:63:97:28:92:3d:68:ef:ed:
         3a:a2:8f:5e:a2:fa:ad:ed:70:e9:40:31:c4:fd:75:13:05:59:
         b2:6f:d9:1d:91:87:29:66:2f:8d:96:43:71:88:f4:3d:f6:7d:
         a4:21:e8:2f:d9:7f:42:68:92:ed:5e:06:ee:82:8d:be:86:ab:
         8a:01:53:1c:a6:55:f6:7d:24:c4:69:c9:41:97:d0:ba:ad:a1:
         5d:d8:7e:55:e6:88:87:c4:36:b9:78:a2:c0:b0:9f:3e:cb:ea:
         f7:c0:5a:e4:22:16:57:13:12:21:11:38:a1:eb:21:89:d0:a4:
         3e:a3:6a:d0:7c:e5:57:61:bd:c2:07:f9:57:7d:1b:0e:b2:5b:
         d3:3f:c0:c0:4a:c6:56:98:ad:ab:31:2f:64:f4:13:47:92:21:
         75:48:f2:b0:db:21:1e:69:90:f7:f5:45:69:b5:62:0d:ee:8c:
         23:ad:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:10 2026 by rpki-client